[24826] in Kerberos
Re: Unable to to get a TGT that abides to specified renewal interval
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Sat Oct 15 11:51:21 2005
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Message-ID: <Kl94f.1846$h25.1596@news-wrt-01.rdc-nyc.rr.com>
Date: Sat, 15 Oct 2005 15:36:10 GMT
To: kerberos@MIT.EDU
Errors-To: kerberos-bounces@MIT.EDU
vtkstef wrote:
> Hi,
>
> I am having problems to get TGTs with renewal periods as specified in
> kinit -r option. My kdc.conf realm stanza has these two paramters set:
>
> max_life = 10h 0m 0s
> max_renewable_life = 7d 0h 0m 0s
>
> I have explicitely set forwadable flag in the realms
> default_principal_flags parameter
> I have played with various values in /etc/krb5.conf [libdefault] stanza
> renew_lifetime,and ticket_lifetime values, and I have set the principal
> -maxrenewlife to 7 days. Still whenever I do a kinit -l 10h -r 7d my
> renew untill timestamp is the same as the ticket creation one:
>
> stefano@filo2 ~ $ klist -fc
> Ticket cache: FILE:/tmp/krb5cc_1000
> Default principal: stefano@SANTORO.ORG
>
> Valid starting Expires Service principal
> 10/15/05 03:51:29 10/15/05 13:51:29 krbtgt/SANTORO.ORG@SANTORO.ORG
> renew until 10/15/05 03:51:29, Flags: RI
>
> I would really appreciate any insights to solve this riddle.
>
> Ciao
> Stefano
Check the lifetime settings for the krbtgt/SANTORO.ORG@SANTORO.ORG and
stefano@SANTORO.ORG principals in the KDB.
Jeffrey Altman
--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
